Ignore autocomplete=off
I want to be able to decide whether to save usernames and passwords (understanding the risks) rather than allowing web sites to decide for me by using autocomplete=off.
If I can't use the Tor browser to save passwords, I'll have to write them down manually, which is error prone, or choose more easily remembered passwords, which is a backward step in security. I'd rather have the browser remember them automatically, and then protect the hell out of the machine on which I run the browser.
Some sites have even gotten especially silly about it, using autocomplete=off on the username field, then sending my username to me in the clear on every page.
Trac:
Username: this.guy