Ensure that card_number and security_code are filtered from the request log (should already be scrubbed client side)