join-form: password should not equal login