do not allow user input to exceed bounds. fixes #13