User data undefined?

And if the access_token belongs to the user you want to look up, then you don’t have to specify a id or login as the users API will return the user for the authenticating token