add function to mask passwords