adding session token to user model