it looks weird that the password field for the Cassandra Sink task is not using the input type=password HTML control, and you can see the password in the brower.
Using type=password is not a security feature, because the value is indeed present in the HTML, but the feeling of the user is better, especially when you are making a demo