Password exposed

Hi,

I've noticed when you type in your password incorrectly in the windows client, it shows the password in the error logs to the admin. However if you type it in incorrectly on the web UI, it correctly shows invalid login in the logs. Just FYI.