password fields now have the correct type