Close possible DoS hole with very long passwords
Phone verification UI