Update user from header to default from token