remove password length limit