is it necessary? i mean what if user will exist but you invoke `destroy_user` with `nil` token?