user management , added password show/hide