Fix password form, remove accidental lower call.

Reported by Sayid Munawar on Flask mailing list.