reverted to creating new login tokens per login