moving access token to its own model and adjusting user creation log appropriatley