allow >8 character passwords in web interface