location header is not redacted in logs

[hahn-kev]

Describe the bug
When looking at the logs for lexbox the location header for redirects is shown, that value should be redacted in the logs as it may contain sensitive information.

Expected behavior
There's settings to control http response logging which includes what headers to log.