fixed the login bug

alright, this was ridiculous to figure out.  the /login function was not
sending responses because when it tried to do updateAccessToken() on an
account with an obsolete schema, mongoose would throw errors that got
swallowed by a promise, causing it to never get to the response and
silently fail