set maxlength="200" attrib on password field