inject the javascript snippet into the page.
clean up the settings page and have a API token check
prepare for release