added auth token methods and specs for User