first (untested) go at expired token handling
got token resets working
a few more signin specs
fixed signin merge conflicts
optimized find_token_card