fix for user_token scope