Is the Express-PouchDB logger leaking potentially private data?

[yaronyg]

The logger built into Express-PouchDB logs things like IP addresses, methods, request params, headers and status codes. It's not clear if all of this is potentially a data leakage scenario where it's info we shouldn't really be keeping.

[mohlsen]

looks like the majority of the logging is only when the log level is set to debug. I assume this configuration would not be used in production. Is this really a concern?

[yaronyg]

This bug checks a few things:

1. What are we setting our logging to?
2. Checking that whatever logging level we are set to doesn't leak any data.
   The really worrisome issue is - what do we do about future changes in logging in Express-PouchdB? Do we audit ever time we get a version increase?