we now distinguish between passwords on forms and passwords on insecure pages and show the appropriate warnings