Hash sensible information in requestlog

Added anonymization of requestlog
  - replace login token of `adhocracy_login` cookie with a hashstring
  - replace username and welcome code in `request_url` and `referer`