hide tokens in vcr logs