Return a user object when login is called with just a token