We use crashlytics as well but only an idiot would store username and password in the clear in their log. Geez, just store a randomized database ID if you have to. It's funny how people justify stupidity when they get caught.