Allow client to send longer names and passwords so that we don't authenticate a

user that supplies a > 9 char password which happens to match a user's password
when truncated to 8 chars.