I have limited a field to two characters but users were still able to submit more than that