find user via token, at /person?token=TOKEN