change API token, encrypt