you check for `user#token`