added autofill directive to work around possible browser glitches with auto-defaulting of user/password for #1108