bugfix hidden password