hide user password
add token based authentification