added api token to user model
more api style responses for user auth