Remove maxlength attribute from password field on login

Adding this attribute is not ok. I just generated a 40 char random password, was able to set it, then unable to login.