Currently, the field type for user tokens is String; however, this doesn't allow attaching an expiration date so it's know if the token is valid/invalid. We should persist this as an entity with an expiration.