reset auth token on login