change token to user