FIX: test for user token api