sometimes user logs in without providing token
I am not sure if it is a bug, but sometimes user can log in to SMASCH without providing token. Token is sent, but the logging is successful without providing token. Issue occurs for a user who is disabled and enabled again, but it can be related to refresh of windows in the browser. I had two private windows with SMASCH open - in one window "user-admin" was logged in and he disabled and then enabled "user". In the second SMASCH window "user" tried to logged in.