Show a truncated access token on API user edit

this will allow us to match it with configured
values, without giving away too much.