fixed unmasked password control