Set username/password limit to between 8 and 15

I just wanted to be consistent with the product backlog.