bump max password length to database limit because why not