[FIX] mask password in connection strings before logging

Closes #1433