set a minimum character limit for password