mask github token when logging, to prevent hacking