if we have no server token, but cookies locally, delete them