getUserByToken modified