strip login credentials strings