Making password managers play ball with your login form