Add token methods to the user model
store user token to the user in the db
Store the token in the DB

- stop relying on session state
- update the user routes accordingly
add test that ensures tokens change everytime a user logs in
add test for createWithToken
configure smoke tests