Users table has token column; email and username are unique