Prevent to send plaintext password to browser

Fix for JENKINS-23165 and pull #157