API password user-interface

Removed `noscript` because no JavaScript is needed for the API password.
Added toggle-password