How to toggle password visibility with vanilla JavaScript