show/hide password fields as necessary