Added authentication and user token refreshing; User revoke needs work