Update default password_length to be 8 minimum

[matthewford]

OWASP recommends a password length of at least 8 characters https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#implement-proper-password-strength-controls

Partly addresses https://github.com/heartcombo/devise/issues/5591