Your browser is doing autocomplete on the password field is my guess. We already set autocomplete="false" for the password field, but would seam your browser is ignoring it. You'll need to clear autocomplete for your site within your browsers settings. If you're using an extension like LastPass it will completely ignore the autocomplete attribute and you'll need to edit the forms that stored password is configured to fill.