Creates tokens that are invalidated by subsequent logins