don't log username password