made password into input type="password" (to hide it)