[Suggestion] Use type="password" for password input field

[ggorlen]

Some browsers automatically save and fill in the form field contents when it's not a type="password", showing the password in plain text when navigating to a previously-used secrets page.

Plain text could be a toggleable opt-in.

[gamedevsam]

This PR also addresses this issue: #31