Fixed a bug that could cause a service account user to log in an incorrect user when passing the user's token as `nil` via the JSON message