do not write user/password info to y2log (bnc #893362)

So far I have tested it's checked whether both values (user and password) are set.
But nevertheless isn't it more secure to have a default?