socket auth: remove unused code
GuestUser: change token field