Steps to reproduce the issue

We can see that com_users doesn't include autocomplete="off" on the form.

Expected result

It should have the attribute autocomplete="off", because some sort of virus already get some user credencials from the web browser.

Actual result

There is no autocomplete attribute.

System information (as much as possible)

Additional comments

It's an important update and so simple to do. I already did it in my joomla version. A lot of virus that the users can get on their pendrives contain a lot of virus that can get those informations from the web browser app that stores it on users documents folders.