fixes #2862 - removing oauth key from the log file

This is more secure. Same situation with "password is invalid" vs "either
username or password is invalid".