Fix authtoken migration

1. the current migration requires the custom user model to be named `User` which is not generic.

2. the current migration fails because site-packages are migrated first - but at this moment the custom user model might not exist. so you have to set a `depends_on` relation.