Force users to login if they have no access token

* This was necessary after we had to blank out access tokens to correct a bug that was overwriting user access tokens
* In theory this fix would be temporary, but until ever user has relogged in it cannot be removed