Validate filename length in utils.secure_filename