remove valid access token requirement

The LoginRequirement checks that an api is set, and is preferable to just checking the access token.
Additionally, this requirement made a request to cloud controller for an app name that would never
exist, which is weird and crufty.
hide passwords in CF_TRACE

[Finishes #67055218]