Fix token interceptor

Fixed token interceptor routes requested by users that aren't logged in (e.g. login route) as the token got accessed directly
without checking if the user object is not undefined.