Limit the max number of characters for password to 72

Prevents DoS attack from large inputs, same behaviour as PHP 5.5's built-in password_hash

Signed-off-by: Shitiz Garg <mail@dragooon.net>
Merge pull request #2510 from Dragooon/release-2.1

Limit max number of characters for password to 72