redact access token, add settings class
add settings