fetch user from api via access token or force login