You can extract the token using i.e. JSON Extractor and save it into a JMeter Variable
Then for the next request you can add the token as a header using HTTP Header Manager
With regards to "concurrent user login" - you can control the load in Thread Group
The below setup starts with 1 user and adds 1 user each second for 1 minute, then 60 users run together for 1 minute: