delete token only when sign out