reset access token on user logout