Fixed a token validation bug when there is no session salt