admin can regenrate user token
add settings controller