adding authentication tokens to users