added authentication_token to user