Enforce a limit on the password length