stop logging passwords

Use a broader, case-insensitive regular expression.

Documented in asylumfunk/nodeftpd#10