[#1770] fix to prevent security issue

found this issue when doing the _feild tag fix noticing the password was redisplaying which is only possible if it is in the cookie(and it was in clear text).  This fixes that issue so that playframework is secure again.