Sign the access token with the real user id.