- add token_required to add_attack views
- remove unused api