limit email password length