fix+workaround for annoying password autocompletion

When entering the profile page with a browser remembering passwords, only one of the two password fields in filled in. This means that the user needs to enter his password, or remove the existing one. This pull request disables autocompletion on password fields in the profile page. Also useful for admins editing other users' preferences.

The order of fields is also changed, so that when browsers still offer to store passwords (like Firefox currently) uses the correct username field (which must be just before the first password field).