user_id -> token checking. all operations with token