Security token

* Adds token to User entity

This will be used to confirm password reset, etc.