Merge pull request elastic#9 from lukasolson/fix/log-no-cookies

Don't log values of cookies

Former-commit-id: cfe7c6b

src/server/logging/configuration.js

@@ -44,10 +44,11 @@ export default function loggingConfiguration(config) {
           dest: config.get('logging.dest'),
           // I'm adding the default here because if you add another filter
           // using the commandline it will remove authorization. I want users
-          // to have to explicitly set --logging.filter.authorization=none to
-          // have it show up int he logs.
+          // to have to explicitly set --logging.filter.authorization=none or
+          // --logging.filter.cookie=none to have it show up in the logs.
           filter: _.defaults(config.get('logging.filter'), {
-            authorization: 'remove'
+            authorization: 'remove',
+            cookie: 'remove'
           })
         },
         events: _.transform(events, function (filtered, val, key) {