Ensure SSL, create user tokens