Trying to hide credentials in body throws error. about cypress-plugin-api HOT 1 OPEN

Cypress.Commands.add('formRequest', (fileName) => {
  cy.fixture(fileName, 'binary')
  .then( file => Cypress.Blob.binaryStringToBlob(file))
  .then(blob =>{

    const formData = new FormData();
    formData.append("file", blob, fileName);

    const httpOptions = {
      method: 'POST',
      url: `${Cypress.env('apiUrl')}/templates`,
      headers: {
        'Authorization': Cypress.env('authToken'),
        "content-type": "multipart/form-data",
      },
      body: formData,
      failOnStatusCode: false,
    };

    cy.api(httpOptions).then(response => {
      const dec = new TextDecoder()
      response.body = dec.decode(response.body)
      expect(response.status).to.equal(400);
      return response;
    })
  })
})