HTML password fields

Do not pass values to HTML form input type password fields.
This makes it appear like no password was ever entered which can be confusing.  On other applications I used to put a literal 8 stars `********`, then on submission if it was an update it meant keep the existing password, and if it's a new entry, reject 8 stars as a possibility for a password.