#589 generate token minor changes
- return `token` attribute in addition to `_`.
- allow user without password.
Merge pull request #590 from joola/feature/#589

#589 generate token minor changes