yotam: fix bug in checking tokens for user profiles, and in vagrantfile