#3 password stored in URL

[Wayne Pearson]

When logging in, the username/password are being stored in the URL from the
login form, instead of just handling it via the DOM.