added maximum password length feature