Add a `no_log` option

This option, on status, but not publicly available, MUST NOT: - save IPs; - save login timestamps. It MAY (?) delete rotated refresh token without grace delay.