remove sensitive auth info from logs