Disable autocomplete on password field

[brandonrobertz]

Autocomplete should be disabled so that all the user's passwords aren't kept in the autocomplete cache. I could also see an argument for this even being a new-password field, but it can be helpful to see the password.