Set `maxlength` on password