Are you sure it keeps localstorage? I was under the impression that passwords from normal mode were shared because that's a "meta" feature of the browser rather than part of the API web pages use, but localstorage and cookies weren't.