adduser: Delete token after signing in

Otherwise, switching user accounts will still send a confusing
token cookie to couchdb on subsequent requests, which is not ok.

1 files changed, 1 insertions, 0 deletions

diff --git a/lib/adduser.js b/lib/adduser.js
index c3ba5fc32..a5b9321d3 100644
--- a/lib/adduser.js
+++ b/lib/adduser.js
@@ -131,6 +131,7 @@ function save (c, u, cb) {
     npm.config.set("username", u.u, "user")
     npm.config.set("_password", u.p, "user")
     npm.config.set("email", u.e, "user")
+    npm.config.del("_token", "user")
     log.info("adduser", "Authorized user %s", u.u)
     npm.config.save("user", cb)
   })