[master] Do not expose trigger token when user should not see it

See merge request gitlab/gitlabhq!2735