[webapi] Fix security issues found by ZAP tool

- Remove 2 unreferenced file in sse
- Turn off AUTOCOMPLETE attribute in form input element
  containing password by using autocomplete="off"