Return None for no user behind token