correct checking method to check userToken.