allow for password fields