allow passwords to be at most 200 characters in length