password text wasn't hidden