limit password characters count