added users and token auth