js validation for max chars