add access token to users
add access token migration
show login link if not logged in