deleting token when the user changes his password