fixed show '*' in password box