logging token and user response
adds app token for login