Added token and sorted PROPERTIES of User model

this would allow the user to verify any email address with the json interface... it was not added on purpose