Use mw.user.tokens rather than an API request (fix #50)