Disable fresh login check in auth engines that won't support it

data/users/apptoken.py

@@ -12,6 +12,10 @@ class AppTokenInternalAuth(object):
   """ Forces all internal credential login to go through an app token, by disabling all other
       access.
   """
+  @property
+  def supports_fresh_login(self):
+    # Since there is no password.
+    return False
 
   @property
   def federated_service(self):