New migration with default user information.
Add extra check when verifying the token

From now on, validate_token requires a user id, the same one used to generate
the token.
with this with not only verify that is a valid token, but also that is the same
user that generated that token.