[PATCH] Minor change to validate a token before checking on a user