changed password fields from text to password_tag