matt.chugg
Moderator
I think its some debugging code left in, but with the new account command parsing, several urls have been left printing to the session log. including the ones if you change your password which contain old/new password in the querysring in plain text.