read password from stdin