move secret key input out of form to prevent remember password popup across browsers