mask the password field.