remove sensitive auth info