A user token is used for SaveUserTags, intended to prevent potential for vandalism (although still trivially possible, as the token derivation is deterministic and obvious).