Bug fix: token endpoint tryed to take user id from session