BZ-954229 : Security review: Stored and reflected XSS throughout. Added javascript cleaning password field when the input is clicked