call unsetMagicInCookie if token is invalid

1 files changed, 2 insertions, 2 deletions

diff --git a/lib/base.php b/lib/base.php
index 9cd2ee55b03..6105f525845 100644
--- a/lib/base.php
+++ b/lib/base.php
@@ -554,9 +554,9 @@ class OC{
 			}
 			// if you reach this point you have changed your password 
 			// or you are an attacker
-			// we can not delete tokens here because users will reach 
+			// we can not delete tokens here because users may reach 
 			// this point multible times after a password change
-			//OC_Preferences::deleteApp($_POST['user'], 'login_token');
+			OC_User::unsetMagicInCookie();
 		}
 		OC_User::unsetMagicInCookie();
 		return true;