BINGO!!!
Those commands fixed both user id 3 and 4, thanks a lot! 
Do you have any idea on how I happened to mess things up? I only used UI commands to handle tokens (but I use the tokens with my webapp and with Postman to authorize API calls) so there must be some rare combination of actions that can cause this problem with tokens.