greeny_1984: Well that would just exhibit the same behaviour as whats currently happening. But you're on the right track.
Image buttons are rendered as type="submit" which means when you press the enter key it is assumed you are submitting. This is an HTMl Forms standard thing.
You need to place your credentials controls in an asp:Panel and set the DefaultButton attribute of the panel to the save button ID for your form.