refactorization: trying to implement extended reload_user method to handle token and session auth