replace passwords with dummy strings