o invalid codes should be logged; they won't reveal any legitimate
  users, but could help finding abuse.