I have a client using CB and they want their registered users to use their last name only for a password. I imported them with CBJuice without problem. When I go to add new CB users, there is an error that the password must contain numbers and letters. I've checked the config for any flexibility but before I dive into the code, is there an easy way to require a password to be at least 4 characters without all the other validation requirements? (Or we could remove all validation requirements if easier). This obviously is not a critical security need but just to keep the casual visitor from their bulletins and such.

I don't mind changing it in core files since I'll document it and update it with any upgrades.

Thanks for any help on this.