now masked the password