save token in mongoose