wordpress.com has bad security practices. Why display my password after it was hidden by the HTML password field.