current user and login with token