Change password form exposes password text in URL as plain text

[brylie]

When submitting the Change Password form, passwords are exposed in the URL as plain text arguments. Submit the form as a POST to prevent the issue, and file a report with the upstream project (yogiben:meteor-starter).

[brylie]

This may be related to one or more upstream packages. I opened an issue with the Differential accounts entry package.

Edit: I was mistaken here. The form is simply written in our project as a template / AutoForm hook.