Remove token query param when setting nightscout url

[Adidushi]

Ensures that nobody except diabot has access to the token once it's set