recreating user when token is persisted