Handle password form items

[dereklieu]

Schema items called 'password' should be type="password".

Since these are sent encrypted, they should only be sent in the update payload if they have been changed.