Fixes #5468 - prevent Chrome from autofilling passwords

1) Create a dummy password field above each password field in password_f
2) Hide that field with css and clear its value.
sign in password does not use password_f (see login.html.erb). All others do use password_f.
do you still think it should be optional?