Was not invalidating tokens when issuing new ones.