Ah, I misread. If we don't get a token, then we need to change the password. So yeah, we can't delete the non-existing token in that case...