fix login token routine
remove migrate process, use reset password instead