Eliminate use of `extract()` in `display_setup_form()`. Only needs to read `password` and `password_message`.

See #22400.


git-svn-id: https://develop.svn.wordpress.org/trunk@28396 602fd350-edb4-49c9-b593-d223f7449a82