An active access token must be used to query information about the current user.