the token needs to be saved to the database since it's validated again when we login using the cookie. Would you mind removing these two lines?