Added the concept of token to user login. Prevent user to order without a token

The order endpoint will need to actually check the database for
validation.