Make sure that the user is token authenticatable