added auth middleware
added find by token user method