clear authentication values on clearing identities.

Set correct session data on first login attempt (previous clients could have obsoleted session data uuid and token and worked incorrectly)