fixed token extraction in fine_user_id()