fix user token bug