hide the password in the ui. closes #172.