removed 16 password length limit