Fix issues with user update parameters.
Set login form to only delete password on failure.