user model now has a token field, this can be used to identify a user as a param instead of a msisdn. This token will change weekly for security.