limit password size to 16 chars
Use java8 Base64