Tokens are now unique, login works and passing userid around is no longer needed