* Factor out some redundant code in the login impl Also fixes a redundant access_token which was generated during jwt login. * changelog