added a extra level of protection for long passwords, even if IS_LENGTH validator is missing