redact basic HTTP authentication passwords in logs

This ticket proposes to do the same thing as Kea already does with database passwords: they are redacted in logs.

Note that RBAC has a similar output filter which can be applied to config-get responses so it can be extended to basic HTTP authentication too.