allow longer passwords