you seem to be leaking your access token for mapbox.com api?

'pk.eyJ1IjoiZnJpZ2dlcmkiLCJhIjoiY21jbHdmZmZmMGV3dTJpcHR5cWcwOHhzdyJ9.Z-XMMh_nFDjm8FUyB2tZ_w'

pk usually means publishable key - should be fine