Why disallow password login when you have 30 char password?