Patch 1

If a browser has cached a user's password and is set to auto-fill passwords, it is possible to have a password set without the user intending to.  The password field on the upload form is filled out and submitted even though hidden.

This patch sets a value on the use-password checkbox and then validates that as intent before setting a password on an upload.