Avoids username and pw inadvertently being added to the URL if the submit event handler for some reason fails (which shouldn't happen of course).
Now that the toggle is hidden when the controlbox is visible.