The login/registration form does not use password inputs for the password box, and shows therefore the password in plain text when trying to login or register.