Working login with token generation. TODO: cache the token in MongoDB