an attempt to handle restart of sts (and thus empty activetoken-maps) with requests from cookies by redirecting them back to login form