make it work when users are authenticated using sign_in in the code or via tokens