"fixes login behavior and excludes users with old tokens"