Adding acces token to req.user