Check for user instance when creating auth token.