picturefill: removing horse

Possibly cause of CVE-201101259 detection

Tracked by behance/issues#120
validate: fix "Password" check to be consistent with server
Merge branch 'master' into feature-base-form