hide password by default

I think you should use a proper password field, otherwise some auto fill plugins will save our password and people watching us installing doptor can see it too..