plain password in header request?

[erikp]

I did modify some templates but I don't think I modified the login template.. do you know where I can find that part?

I've cleared the cookies, cache, tried IE as well. I didn't touch the javascript at all...

I looked what's going on in the md5hash function that is called on submit, and it looks like this:

function md5hash(input, output_html, output_utf, skip_empty)
{
 
  (..)

 if (!skip_empty)
 {
 // implemented like this to make sure un-updated templates behave as before
 input.value = '';
 }
 }

 return true;
}

I checked the skip_empty boolean and it has the value true... what would that mean?