(bug 9835) password input should be type="password"