hide authorization header in logs
changelog added