Passwords over 15 characters are accepted without an error message

When an ICOTS user clicks the link in a password reset email and enters a new password longer than 15 characters, ICOTS does not display an error message. This can lead users to believe they can log in immediately, but they will be unable to do so because the password is too long.

ICOTS passwords must be between 8 and 15 characters long and include both upper and lower case letters, at least one number, and at least one special character (e.g., !, @, #, $, %, ^, etc.).