hiding password instead of showing its encrypted value