hide password in error logs