return auth token after creating a user
basic session creation