This change also ensures that user tokens are regular files. We may want to add a similar check for user challenge files.
Ricky Zhou