[fix] valid token returns user_id instead of hash
[minor] change find in set method to find in users
[minor] publish operation checks for user status