obscure auth header
Merge branch 'obscure-auth-header'
hide basic auth info