Force regenerate token that match user ID.

Users that were logged in with the old style cookie
using their user ID were unable to re-login.