Change to create a token if the user doesn't have one