add Token model
write token to db
API to check token