create user controller - token fix