Limit password to max characters supported by bcrypt in UI

This prevents backend errors when submitted passwords are too long, handling it
on the client-side instead.