The login page shows the password in plain text

It should be using the password type of field