Change logging_level default to INFO; extend log redaction

Change uaa.logging_level default from DEBUG to INFO. The DEBUG level
produces verbose Spring Security and JDBC output that is not appropriate
for production deployments.

Extend the log4j2 redaction pattern to cover code=, access_token=,
refresh_token=, and id_token= in addition to the existing password=
and client_secret= patterns.

Author: fhanik

jobs/uaa/templates/config/log4j2.properties.erb

@@ -15,7 +15,7 @@ case logging_format_timestamp_value
 end
 %>
 property.log_directory = /var/vcap/sys/log/uaa
-property.log_pattern=[<%= timestamp_format %>] uaa%X{context} - %pid [%t] - [%X{traceId},%X{spanId}] .... %5p --- %c{1}: %replace{%m}{(?<=password=|client_secret=)([^&]*)}{<redacted>}%n
+property.log_pattern=[<%= timestamp_format %>] uaa%X{context} - %pid [%t] - [%X{traceId},%X{spanId}] .... %5p --- %c{1}: %replace{%m}{(?<=password=|client_secret=|code=|access_token=|refresh_token=|id_token=)([^&\s]*)}{<redacted>}%n
 
 appender.uaaDefaultAppender.type = File
 appender.uaaDefaultAppender.name = UaaDefaultAppender