login once: check token and already signup