ui: shown password in user list