fix sending user token on user profile