Add functionality to password module

That's what I thought too, but that ends up submitting a request to '/password/auth/password', eg. I think the action path is relative to the current path, and since the POST request is being submitted to the same URL as is the page that the form is currently on, a blank path gets interpreted as the current path. It works locally, maybe there's a better way of doing it.