actually use the token from the user if present