password in web form is now encrypted to avoid accidental leak via password manager