fixes #36 #50 allow user to store token and user profile