password fields echoed with stars, instead of original letters