fixed possible DOS attack scenario with very long passwords