Added logic to exclude parameters present in the APU URL string

[cantus-firmus]

Previously, if an access key or other sensitive data was included in a GET parameter, it would be included in the log as part of the API URL. This change allows the logger to replace sensitive values the API URL field with FILTERED just like in other parts of the log.