models.js mod. validateToken, createApp and requestToken works in auth.js