fixed token bug on logging out and in