handle password fields as password