filter user_credentials parameter from logs and hopefully party_foul, too. for #241