Fixes #5468 - prevent Chrome from autofilling passwords

1) Create a dummy password field above each password field in password_f
2) Hide that field with css and clear its value.
in several places (e.g. the host form submit) we send the form data in ajax, how can we ensure that this happens prior to the ajax?

once strong params are used, you might get an exception