Users can register and login which will send them a token which they can use to access protected API’s