fix up auth logic, add some defaults and contraints to loginToken columns