Use ENV variable for API Token and downgrade webmock

VCR says it only supports webmock < 1.12 for now, so I downgraded to be safe.