Hide sensitive data from client debug

[mm-pagely]

People are going to blindly copy/paste stuff into bug reports, slack, etc. We should do our best to hide this stuff from the debug logging:

• Authorization header values
• Password (and probably MFA codes) form input