loser persistence

[kavorite]

if someone attempts to access the API as an unverified user and then later their account is verified, the persistence of their steam ID in the users table still causes guards to fail

unclear if intended behavior; should there be a DB update?