remove reference to https://production-api.gmon.io

[slifin]

Looks like by default calling get-access-token in the core namespace correctly would throw bank login details to https://production-api.gmon.io?

I can see there's a commented out call to monzo's api above (inside maybe add monzo's api back in by default even if it doesn't work? just in case gmon.io turns malicious