Do not track sign in when authenticating with token

sign_in_count, last_sign_in_at, current_sign_in_at should not be updated when authenticating with token.
See #51