Added user authentication and email validation

We're using tokens now. But still no gcm so need to manually compute token and hardcode into the request