def _scrub_request(http_request):
    """ Removes email address and password from a client login request.

    Since the mock server saves the request and response in plantext, sensitive
    information like the password should be removed before saving the
    recordings. At the moment only requests sent to a ClientLogin url are
    scrubbed.
    """
    if (http_request and http_request.uri and http_request.uri.path and
        http_request.uri.path.endswith('ClientLogin')):
        http_request._body_parts = []
        http_request.add_form_inputs({'form_data':
            'client login request has been scrubbed'})
    else:
        http_request._body_parts = []
    return http_request
