extra logging if login token is missing from cookies