use readPassword for interactive authentication with no echo