double bracket on user id and token

for the qrcode