adds 'autologin' functionality using user provider and  token

Really apprehensive that this is the best way to do this..  But since you're the expert, you can tell me :)