check if the security token is available before checking if the user is logged in