setup simple form, still need token