README: user token destroy