fix password mask