fix missing paypal class
disable token checking for non formwrap API requests
add authorization token to user + API page