add token for user