If I am using swift to obtain the user token from social sign in like (facebook, google). How safe it will be for me to get userId from those tokens and hash it with my backend