Avoids username and pw inadvertently being added to the URL if the submit event
handler for some reason fails (which shouldn't happen of course).