do not show password on unsecure page