fixing check for Phone vs Token
adding test to the User class for an invalid user ID