Don't put HipChat token in URL

These were leaking via error messages in our website. :( Changing tokens after pushing this.

Auditors: csilvers