fix #1547 -- warn about post passwords being unsafe

Signed-off-by: Chris Warrick <kwpolska@gmail.com>