Update default.rb
Update user.rb
Merge pull request #148 from kramvan1/master

Add sensitive flag for resources that expose passwords in log