Make autologin token only one-time use

src/oidc_templates/login.ejs

@@ -159,13 +159,14 @@ if (autoLoginToken) {
         method: 'POST',
         body: JSON.stringify({ autoLoginToken }),
         headers: { 'Content-type': 'application/json; charset=UTF-8' }
-    }).then(function (response) {
-        res = response;
+    }).then(function (res) {
+        localStorage.removeItem('cloudronFirstTimeToken');
         return res.json(); // we always return objects
     }).then(function (data) {
         if (data.redirectTo) window.location.href = data.redirectTo;
         else console.log('login success but missing redirectTo in data:', data);
     }).catch(function (error) {
+        localStorage.removeItem('cloudronFirstTimeToken');
         document.getElementById('internalError').classList.remove('hide');
         document.getElementById('busyIndicator').classList.add('hide');
         console.warn(error, res);