Don't send tokens outside WordPress.com