fixed hiding passwords