changing password to non viewable