Now, I'm not a security expert, I'm still working on learning a lot of stuff. However, putting a max limit of 15 characters on passwords seems absolutely insane to me. Why would you want people's passwords to be shorter, that just makes it easier to brute force?