sdding session token to user model and adding ssl to production