The ability for browsers to cache and pre-fill form fields should be explicitly disabled for personal and sensitive information. This does not apply to usernames, but does apply to passwords.