added back in redundant new token request at login