Access token set and removed from header
Implemented feedback from pull request

Replaced tabs with 4 spaces,
userLogin passes through AccessToken
new helper class logins and passes back User