we can't invalidate the token if there isn't a user session active
we can't invalidate the token if there isn't a user session active

owncloud/core,owncloud/core,owncloud/core,owncloud/core,owncloud/core,phil-davis/core