changed userId to user on token, tests passing