limit username and password to 20 characters