bugfixes:
  - user - allow 13 asterisk characters in password field without warning