add username to token authentication process