Add autocomplete='off' to login form, fixes #5438