added token attribute to users table, for sessions