mod_muc: do not log destroy twice
web_admin: do not allow to access the passwords