API token validation at start, nicer Options page