added token field to users