Always track, regardless if token as validated on-line or not. User should have a token in user.json.