fuck you, oyvindkinsey

fixes instances where getUserAccessToken too readily clears persistent
data. this includes an obnoxious occasion where the js-sdk fills fbsr_
cookies but php-sdk can't find a valid access_token. session is still
valid regardless and shouldn't be destroyed.