Don't log secret token in GAE logs either

Test Plan:
Crossed fingers.

Auditors: csilvers