There was a django security issue where password length lead to a possible DOS attack against the server. So now they limit passwords rather arbitrarily to 4096 bytes.

https://www.djangoproject.com/weblog/2013/sep/15/security/