diff --git a/src/main/java/io/kidsfirst/config/WebConfiguration.java b/src/main/java/io/kidsfirst/config/WebConfiguration.java
index c1c9c5b..27a9f3c 100644
--- a/src/main/java/io/kidsfirst/config/WebConfiguration.java
+++ b/src/main/java/io/kidsfirst/config/WebConfiguration.java
@@ -27,8 +27,6 @@ public CorsFilter corsFilter(){
 
         String allowedDomains = env.getProperty("application.cors_allowed_domains", "*");
 
-        log.debug("Allow domains : " + allowedDomains);
-
         String[] allowedDomainsArr = allowedDomains.split("\\|");
         for(int i=0; i<allowedDomainsArr.length; i++){
             config.addAllowedOriginPattern(allowedDomainsArr[i].trim());
diff --git a/src/main/java/io/kidsfirst/core/service/FenceService.java b/src/main/java/io/kidsfirst/core/service/FenceService.java
index 4ad5830..3309ff0 100644
--- a/src/main/java/io/kidsfirst/core/service/FenceService.java
+++ b/src/main/java/io/kidsfirst/core/service/FenceService.java
@@ -28,11 +28,6 @@ public Optional<Tokens> refreshTokens(String refreshToken, Provider fence) throw
         val clientSecret = fence.getClientSecret();
         val fenceEndpoint = fence.getEndpoint();
 
-        log.debug("request tokens, client_id={}, client_secret={}, fence_endpoint={}, refresh_token={}",
-                clientId,
-                obfuscate(clientSecret),
-                fenceEndpoint,
-                obfuscate(refreshToken));
         val request = new TokenRequest(
                 new URI(fenceEndpoint),
                 new ClientSecretBasic(
@@ -63,12 +58,6 @@ public Optional<OIDCTokens> requestTokens(String authCode, Provider fence) throw
         String clientSecret = fence.getClientSecret();
         String fenceEndpoint = fence.getEndpoint();
         String redirectUri = fence.getRedirectUri();
-        log.debug("request tokens, client_id={}, client_secret={}, fence_endpoint={}, auth_code={}, redirect_uri={}",
-                clientId,
-                obfuscate(clientSecret),
-                fenceEndpoint,
-                obfuscate(authCode),
-                redirectUri);
         val fenceRequest = new TokenRequest(
                 new URI(fenceEndpoint),