From 1457e12f702d203c1c6b4eb731f7edb3057bfaf2 Mon Sep 17 00:00:00 2001
From: Vinyl Darkscratch <vinyldarkscratch@gmail.com>
Date: Tue, 29 Jan 2019 17:30:10 -0800
Subject: [PATCH] Don't remember password on failed login

---
 gluon/tools.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/gluon/tools.py b/gluon/tools.py
index 37653df4..1798d5b2 100644
--- a/gluon/tools.py
+++ b/gluon/tools.py
@@ -2637,8 +2637,9 @@ class Auth(AuthAPI):
                         # invalid login
                         session.flash = specific_error if self.settings.login_specify_error else self.messages.invalid_login
                         callback(onfail, None)
+                        request.post_vars['password'] = ""
                         redirect(
-                            self.url(args=request.args, vars=request.post_vars),
+                            self.url(args=request.args, get_vars=request.get_vars, post_vars=request.post_vars),
                             client_side=settings.client_side)
 
             else:  # use a central authentication server