user credential lengths