add a 'token' requirement for signup.

resolves #53