The password is stretched in your browser before it is ever sent, so the sign-in form cannot work without it.