update password maxlength