payload logging enhancement

1. hide password in payload log
2. support quota/limits/usage operations