fix user token check