add migration script to add token and token_expires columns to user table