- fixed post token

- added check user