Fix opening of session for users visiting with saved password token