password too long is such a stupid reason to reject a password