remove passwords from logging