Require login to add tokens

app/policies/token_policy.rb

@@ -34,11 +34,11 @@ class TokenPolicy
   end
 
   def create?
-    @user.admin? || true
+    @user.admin? || @user.signed_in?
   end
 
   def new?
-    @user.admin? || true
+    @user.admin? || @user.signed_in?
   end
 
   def add_existing?

app/views/layouts/_flashmessages.html.haml

@@ -1,7 +1,7 @@
 .original_flash_message_code
   - flash.each do |key, value|
     %div{class: "alert alert-#{key}"}
-      = value.html_safe
+      = value.to_s.html_safe
 
 .react_flash_messages
   %div#flash_messages