Handle password/security token properly wrt encryption/logging

Also, make sure they are encrypted properly when stored in the repository. The setValue() should probably encrypt them and getValue() decrypt them.