Move token generation from controller to model
Serialize correct user params