Don't log passwords from HTTP requests to the API

Tested manually