token is guid now, also small fix with local passportjs strategy was fixed  #SH-15 fixed