added client side valdidation on password, removed server side min length check. Just check that it is not 0 len