I thought I caught it last night (checking for tokenData.srv instead of tokenData.svr). That got it to utilize the user ID in the token data, however nothing is being returned from the userService.getUser() call. The log statement being printed indicates that the password stored and the password sent do not match.