update to work with the hashed login tokens used in 0.7.1 (and old-style tokens still, too)