implemented login, status and access token (for next api call)
added access_token field to metadata user model
on login, generate token and save to user model
added and registered staff resource