It’s 2014. Why are there silly restrictions on password length?