feature #2796: Login tokens