scouring for old signup tokens