remove check for access token for user case