Update mailFormAttachment.php

added "password" and "pasword_confirm" field to blacklist