Edit: I stand corrected, this approach worked for me when I was building an internal app but apparently doesn't work at other times.

Just don't give the input an "id=password" and Chrome won't throw your password into it.

It's just a label, the autofill is because it matches all the other sites where you do want Chrome to autofill your password.