found a better way of doing password masking