Question

An AI assistant added 'helpful' logging to your TypeScript login function so you can debug auth issues. It compiles and the logs are useful. What should you catch on review, and why is sensitive data in logs a real problem even though logs feel internal?

1async function login(email: string, password: string) {2  console.log(`Login attempt: ${email} / ${password}`);3  const user = await auth.verify(email, password);4  console.log('Session token issued:', user.sessionToken);5  return user;6}