We should probably clear the password fields and set them back to hidden after success so that it feels more "done".