luci-base: do not trigger form action when revealing password