add field 'token' into tblUser