don't log the URL parameters of failed requests

they may contain credentials