hash access token is writing to logs