Refactor checkin to use tokens for user identification