Remove tokens from the /users/ endpoint - Fixes #2