read passwords from the console safely