ApplicationForm respects now application_password-setting in configuration