made password field secret and added hints