don't use values passed to password fields

These are generally encryped and don't really make sense to display
here.