Don't send tokens outside WordPress.com

:+1:  on the tests