Comment by gherkin

Looks good. Methinks you should change the 3-char minimum password length to 8 minimum for typical security reasons.