validate token able to disable; fix add cron job (update still not work)