Security fix: do not log password