saves token/secret on user record after authorizing w/ fitbit