Right now, it's left up to the user to decide whether or not to enter their password, we expect users to know the difference between these sites, and that's an unreasonable request to make of users.