move getpass decl to the right place