Add token methods to the user model
store user token to the user in the db
Store the token in the DB

- stop relying on session state
- update the user routes accordingly