made password input hidden