set token by users