basic length limits on inputs