store user token in session