clean_rack_request_data should also filter out "action_dispatch.secret_token" to prevent passing a Rails applications secret token
Merge pull request #172 from yyyc514/do_not_log_session_secret

Do not log session secret