SecurePassword - Validate password must be less than or equal to 72

See #14591, Reason - BCrypt hash function can handle maximum 72 characters.
Can you put a comment above this constant explaining why it is necessary?