render the user with token on SessionsController#create