set autocomplete attribute for login form to "off".

RE: http://rapi7.com/db/vulnerabilities/spider-sensitive-form-data-autocomplete-enabled