Fixed login token structure, using validation and correct refreshing.

Signed-off-by: Dalton Pelc <daltonjpelc@gmail.com>