login form: password is erased after login