minor refactor to make index route clearer, change input type of password fields to hide the characters that users type in