don't leak tokens in GET parameters to app logs