add auth_token creation when creating a user