Refer to a TOKEN_USER payload as a "token user," not as a "user token".

This corrects messages for can't-happen errors.  The corresponding "user
token" appears in the HANDLE argument of GetTokenInformation().