Don't keep posted passwords on password change page
DRY Setting Controller