With using the name password for the password return it will be hidden automatically and an error message will still be visible.
