initial scaffold of user tokens
switch back to devise strategy for authentication