Correctly extract user record from token