remove password from log write

app/services/user.js

@@ -349,7 +349,7 @@ class UserService extends SiteService {
 
   async handleLocalLogin (username, password, done) {
     const now = new Date();
-    this.log.info('handleLocalLogin', { username, password });
+    this.log.info('handleLocalLogin', { username });
     try {
       const user = await this.authenticate({ username, password }, { adminRequired: false });
       await this.startUserSession(user, now);