mask implemented but partially for password field