http code in its own package. user token state in an actor