don't display password on incorrect log-in