autocomplete current password vulnerability