Allow toadlets to opt out of automatic form password checking on POSTs.
Avoid timing vulnerability in ToadletContextImpl.checkFormPassword(HTTPRequest).