mp previews, api token and force ssl