forms: password inputs cleared after submition