hide password
fix