describe the password fields a little better