if password isn't remembered, don't show anything at all in the password box; fixes #2