:bug: avoid sending double headers when the user tokenization fails