How did you block out the text it's typed into the password field? So it displays as '****'.