Ported checks for maximum password length implemented in Symfony core that prevent a DoS attack (CVE-2013-5958). More info on the official Symfony blog: http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released
Added a couple of tests for maximum password length limit