enable filtering of sensitive Rack vars by default

see #185 for more details