fix(account-creator): avoid many leaks (username, password, auth info)