Updated disabled field to readonly as this stops submission of that field

This fixes not being able to create tokens from the api-access page.