filter auth tokens from log, updated api docs