fix for missing user on token refresh