hide token in logger