Login using a one-time token