Fixed token creation in user model from BSONObject
Added token checking before api requests