password field empty by default