fix comment that wasn't updated in test

Co-authored-by: Rasmus Wriedt Larsen <[email protected]>

Author: erik-krogh

javascript/ql/test/query-tests/Security/CWE-312/passwords.js

@@ -173,5 +173,5 @@ const debug = require('debug')('test');
     console.log(myPassword); // NOT OK
 
     const myPasscode = foo();
-    console.log(myPasscode); // NOT OK - but not flagged
+    console.log(myPasscode); // NOT OK
 });