disable multiple auth tokens per app