protect against maliciously long name/email inputs