hide passwords in http logging
move abstraction to Dispatch
log the correct object
add a SIGINT trap