Don't mask token on input

Tokens are one time passwords. There's no strong reason to mask
them and listing it as a password field screws up many password
managers.

Change-Id: Iaf5446d80ec61ddec2403554b527781ab26493b3
Merge "Don't mask token on input"