What if the user has more than one token?