Allow authorization from userId and userAcessToken.