filter senstive info

Adding HTTP_AUTHORIZATION to rack filters,

also SENSITIVE_ENV_VARS currently has secret and password, I've added auth and token here as well.