user auth tokens
include link to submit workout in emails