add user.token in session