Edited auth so that it works nicer with usernames and deletes the stored token if a request to /api/users/me/ fails (the token expired)