updated so that whitelist users succesfully have their api token added to their user account