password: fix 404 by removing reference to old path
password: Listen for form's submit event instead of button click

This requires changing the "button" type to submit, since
type="button" won't submit a form.
password: Get the "login" form's element in a more explicit way