chown files to bearer token username (@)