sanitize access tokens and Authorization logs in headers