add auth token to users