fix: crash when no user in token

lib/LxAuth.js

@@ -710,7 +710,7 @@ module.exports = function (options) {
             // update last activity in token database
             self.updateLastActivity(token, function () {
                 // put user in request
-                var user = token.user;
+                var user = token.user || {};
 
                 user.userId = token.user_id;
                 user.isAuthenticated = true;