what the purpose of limiting the password characters anyway ?