token now gets refreshed after changing the password