Make the server password field a "password" field

Not a big deal, but when a user sees a password field, they usually expect the field to hide its input.