Sensitive information

This should solve #237.
The password is now defined as sensitive and shouldn't show up in error reports during authentication.