added method to retrieve users by token