Consider changing the lookup to search tokens without user link. It may return a token which has a defined user. If developer needs to get a token from the user-tokens, they need to give the userid. Empty userid should not use tokens which has some userid link.