hid password on user new signup