Clarify user key and app token