working on client
password input is hide now