wowzer. I just checked for my business account with santander and found my password as you mention.

Edit: although when you get logged out for inactivity or you click log out it seems to get rid of this cookie.