ASP 2.0 web page bugfixes

I have a set of ASP 2.0 (C#) web pages that require a login to access. I have three issues that need to be resolved. 1. When a user wants to change their password, we need to ensure that the password entered is 6 characters or longer. 2. THe pages should have a timeout of 15 minutes and when a user is logged out (or the user logs out manually) we need to ensure that they can't get back to the secured pages. 3. The last piece is the most difficult. I have a development server and production server. I have identical files on the servers but there is a function that does not work on the production server. I need help troubleshooting this one.