Client secret exposed in exception during authorization

[cheuer]

When calling get_authorization_from_code, if an exception occurs then the entire request body is printed in the exception, which includes the client_secret.

The exception class mentions leaving out the Authorization header for security reasons, perhaps you should consider checking the body as well.