Set a cap on password length