add user and token accessors