fixed user.findbytoken not working properly.