There's an attribute in User called `token` that does not appear to be used anymore (not sure on its origin either). We should look to remove this.