UserID is part of the access token