[PATCH 2/2] server: Use the token owner instead of the token user for default object owner.