cleanup password after each login attempt

I've noticed that after a logout or unsuccessful login attempt, the password field wasn't empty when going back to the login page.

I think it is unsecure to keep the password in memory after a login attempt so I submit this PR that just cleanup the password variable (and bound form input).