move the password instructions under the password input per Bram's suggestion