Even though many servers and sites are moving to increased security, Bugzilla caps the password length at 16 characters.  By contrast, my university requires a *minimum* password length of 15 characters.

TO REPRODUCE:
* Login to bugzilla.gnome.org
* Try to change password to one that is >16 characters

WHAT HAPPENS:
* Error message saying password is limited to 16 characters.

WHAT SHOULD HAPPEN:
* Accept and use passwords of arbitrary length.

OR (dispreferred but better than the current behaviour):
* Internally truncate passwords to 16 characters
* Warn user that only the first 16 characters would be used