added username check
if you have a token and it doesnt check out, destroy it