Disable token auth functionality if flag disabled

attempts to use token auth when disabled will result in redirection to
the login screen with a flash message saying that it has been disabled.

The token auth input box is removed from the login page.
Rubocop style