Limit the max number of characters for password to 72

Prevents DoS attack from large inputs, same behaviour as PHP 5.5's built-in password_hash

Signed-off-by: Shitiz Garg <mail@dragooon.net>