form macros: template for password input