change secret field to password