placeholder logic for password fields