exclude api token from vcr casette