Don't allow users to set passwords that are invalid for login

[mattcen]

The below code:

alloc/person/templates/personM.tpl

Lines 39 to 43 in 05539b5

	<td><input type="password" name="password1" value=""></td>
	</tr>
	<tr>
	<td>Confirm Password</td>
	<td><input type="password" name="password2" value=""></td>

Allows a user to set a password longer than 32 characters.

But the below code:

alloc/login/templates/login.tpl

Line 18 in 05539b5

<span><input type="password" id="password" name="password" maxlength="32"></span>

Requires the password on the login form to be a max of 32 characters.

I have tested (accidentally) that I can set a 36-character password successfully, but then fail to log in with it due to the char limit of the HTML field.