[IMPR] Don't trust token from NeedToken response
It can stop working any time soon and it can also be invalid
if multiple login attempts because of endless loops.
- generate fresh login token on every login attempt
- copy _logged_in() from api.Request
- keep track of such issues