Only keep the last token for a user.