[HttpKernel] Mask '_password' request in profiler

Just mask the request _password value in profiler log view.