fixed password permissions
added long user name hide