User char[] instead of String for sensitive values

[hirako2000]

Sensitive data better not be assigned to String, they are immutable hence stay in the Heap. Consider using char[] instead

ref: fortify heap inspection