Signup also logs in, and returns token