New user and token should replace previous cookie.