reworked middleware to add token route and validate users

reworked middleware to add token route and validate users #123