user: check for password with byte size of 16 and 20

user: check for password with byte size of 16 and 20 #44