add user auth, admin auth, password verification and token expiration date