set user to work with token in all controllers, fixed arrays of active records when requested directly