sugar: version 8

Add patches to set the max-age in the updater,
and hide the password in the proxy config in the cp.