install q and make token.verify returns promise
Merge branch 'users' into socket.io
fix authentication to support promise