setup page
make api token required