Recovery Code must be exactly 10 characters

[claudiodekker]

This is a very minor bug, but essentially when you enter a recovery code with a dash separator (as it is displayed during code generation), the code will be 11 characters long instead of 10, while the recovery code input itself only allows 10 characters exactly.

The obvious workaround is to simply enter the code without the separator, but the problem there is that those who store their recovery codes in a password manager, will likely copy-paste the code as-is with the separator, in which case the browser likely truncates the input field, making the code one character too short, causing the code to be considered invalid.

To fix this, we'll want to keep the "min" length as-is, but make the "max" length 11.

[claudiodekker]

Keeping this one open until 1.0 is released.