front-end: masked the password input while register