users (authors) can be created, the back-end assigns the user a token and encrypts the password