Using the redisplay property of apex:inputSecret. (And fixing test.)