We now hide the password
We use c:url on the action