minimum password length

src/Auth/Business/LuticateUsersBusiness.php

@@ -132,6 +132,9 @@ class LuticateUsersBusiness extends LuBusiness {
 
     public static function add($username, $email, $firstname, $lastname, $password)
     {
+        if (strlen($password) < 5) {
+            self::badInput("Password must have at least 5 characters");
+        }
         $hash = self::hashPassword($password);
         if (filter_var($username, FILTER_VALIDATE_EMAIL))
             self::badInput("Username can not be an email");