and you'd have to edit the access token's rel on user change