added index on users->token to allow finding by token and ensuring uniqueness