setting token by admin