are you using a password field?