disabling admin panel urls
removing token generator, as it's default inside the form's save()