simple Javascript alternative to <input type="password" ...