The approach to retrieving a "plain text" of the API token may be
completely broken by recent core changes but should still be working for
"legacy" api tokens.  However, this is enough to prevent userToMap()
from generating an exception.