fix: limit request body size on auth form handlers (gosec G120)

features/auth/handlers.go

@@ -39,6 +39,7 @@ func HandleRegisterPage() http.HandlerFunc {
 
 func HandleLogin(queries *repository.Queries, sessions *scs.SessionManager) http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
+		r.Body = http.MaxBytesReader(w, r.Body, 1024)
 		username := r.FormValue("username")
 		password := r.FormValue("password")
 
@@ -73,6 +74,7 @@ func HandleLogin(queries *repository.Queries, sessions *scs.SessionManager) http
 
 func HandleRegister(queries *repository.Queries, sessions *scs.SessionManager) http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
+		r.Body = http.MaxBytesReader(w, r.Body, 1024)
 		username := r.FormValue("username")
 		password := r.FormValue("password")
 		confirm := r.FormValue("confirm")