making the User service encapsulate local storage use for security tokens