Remove API token from logs

# Context Suggested by @hhasert. No reason to log full tokens, keep some characters to help people check their personal token is used or not # Analysis