Fixed an issue in FormHelper.php. The 'sendErrors' method will now check if a key contains the text 'password'. If so it will only return the value of the key and an empty value, instead of returning the password itself. This will prevent the password from being passed and visible in the URL error string.

Also updated the error message on the Login page.