add an option that allow the replacement of the authentication by the new token.

I need to let users switch from an account to another just by following a link containing token without requiring him to logout before. Note, that the commit did not change the current behavior: the token continue to be ignored if an user is already authenticate until you change an option.

 I don't know if it's the good way to implement it. Any comments are welcome !