fix annoying access denied when re-login

If users submit a new valid token after they have been authenticated,
the gateway will wrongly submit the old token to server, cause the
server responds with 'Tried to login with a token that wasn't
TOKEN_UNUSED' error message and the original valid access right is
also denied by the gateway.