move time format string to global namespace

The time format string used by `created_at` and `updated_at` JSON fields
is not specific to token data alone.
add further User properties

+ company, email, created_at, updated_at
adjust testdata to recent User changes