set max length of passwords and usernames