Are you sure it keeps localstorage? I was under the impression that passwords from normal mode were shared because that's a "meta" feature of the browser rather than part of the API web pages use, but localstorage and cookies weren't.
Well, I just checked and it looks like localStorage is not shared. But I recall it was shared when I checked sometime last year, maybe a bug back then.
