create new user when login with valid token