reset token whenever user login