update controller settings for token authorize sys