fix: don't crash with new jwt-only (app) users (#86)

fix: don't crash with new jwt-only (app) users (#86) #225