protect ParagraphsController#create with Toke