don't put the real uploadpassword in the error message

fixes #19