Passwords: bump max length to 1024

Why was it at 20?
Why even have a max length anyway?