Well, it looks straightforward, but including the line:
filter_parameter_logging :password
in my application.rb, and in my account_controller is having no
discernable effect. I'm using acts_as_authenticated, with all the
standard stuff from December, '07.
An experience Rails programmer buddy of mine figured it out after
looking at my code. I had two lines in there, not one. The second
line was: filter_parameter_logging :password_confirmation. It was
overwriting my filter for password. When I combined the two lines
into one: filter_parameter_logging :password, :password_confirmation,
it started working.