add token authentication to user
controller test for token auth