added user token verification + encoding strings