The code pointed to current_user not the authentication_token