'' did not seem to properly mask an entered password, trying '*'