Function verify_user_token 

pub fn verify_user_token(
    conn: &Connection,
    token: &str,
) -> Result<Option<UserRecord>, String>

Verifies a raw 64-char hex token. Returns None if invalid or expired.