fixed require_user base in account/tokens page