user model auth_token refactor