Webhdfs passes UserParam even when a token is being used. The NN will construct the UGI from the token and error if the UserParam does not match the token's. This causes problems when a token for user A is used with user B's context. This is in contrast to hdfs which will honor the token's ugi no matter the client's current context. The passing of a token or user params should be mutually exclusive.