preserve existing purchase token if user logs in without supplying one