adding user settings and current user function with token validation