Hide http auth information in npm install log.

My team use a private registry which used ldap auth, so npm install will print http auth information to screen, it's very insecure.