correct HTTP_PRIVATE_TOKEN in overview page