Hide http auth infomation in npm install log.

My team use a private registry which used ldap auth, so npm install will print http auth information to screen, it's very insecure.