refactored login routes to use access token
improvements in e-mail tokens