lazy change to hide the cursor and center password stars

probably breaks other functionality - ymmv