689 store and authenticate with user token

closes #689