Added safeguards against hashing long passwords

- No user should run into the password length limit unless they're
  trying to bring down the site (hashing long passwords can be part of a
  denial of service attack).