fix bugs in users json and tokens in token-input