SECURITY: Fix User::setToken() call on User::newSystemUser