mask sensitive information when logging
do not write sensitive information like the access token to the log in plain text. the token is masked.