generate token (currently hardcoded) when user logs in. changed marshalling implicits to use option[T]
added auth token