fixed password visibility