Clean up logging

1. `lib/logging` doesn't need Express
2. `:referrer` can leak user email addresses into our logs