#23 Max request body size for /login

It should be just a few KiBs.

Currently username and password length are compared against the limits but a lower level limit for /login would be better. Lowering the priority for now.

The current config is fine. No need to use a lower level config in my opinion.