user deletion spec
ensure authentication token is generated on user creation.