fake a hidden password field to hide browsers input from saved password