s1lite: Added method="POST" to the form tag since we don't want to show the password in the URL if an error occurs.