Why do sites limit how long a password can be? 10 chars is not enough. This makes me a little crazy.