updated FormBuilder class to prevent passwords from being filled by flash data