getToken now takes a user.