Make DELETE /user/token throw 401 if user failed to provide token. (null)
Use process token helper method to parse both header/query tokens.