Comments on auth.GetUserFromToken