activate token for BO CSRF protection