allow addUser to use token authentication for initial addUser