add getUserFromApiToken method