and revert the tokenSubType values again...

tokenSubType contains _different_ values than the authMethod enum.
I overlooked that fact before, unfortunately.