Set token to null when expired in order to avoid redirect loop (only if root is restricted)
Merge pull request #3 from minjatJ/master

Set token to null when expired