updated steps to include user token creation