Update password length validation to 72 characters max

BCrypt has a limit of 72 characters for the password. Anything beyond 72
characters is truncated. This commit updates the validation to limit
passwords to less than 72 characters, keeping within the limitation.
Merge pull request #3319 from lleger/lleger-fix-password-length

Update password length validation to 72 characters max