Fixed #62 -- Don't leak sensitive post parameters
Fixed #63 -- Login wizard should handle changing passwords

Thanks to Jay McEntire for the bug report.