Passwords limited to 16-character maximum

[meulop]

The regex for the newPassword and reenterPassword claims limit maximum password length to 16 characters. They should instead probably default to a maximum of 64 characters to max the "Strong" password complexity setting for user flows.