adding auth token to user