Remove the api_token field from the response to the login action (POST /sessions). This doesn't make sense in the presence of multiple API keys, and is also not generally useful; if you need an API key, create one yourself and write it down.
776 B
776 B