Users::SessionsController#create ignore params when auth toke exists

[edimossilva]

Environment

• Ruby 2.7.0p0
• Rails 6.1.4.1
• Devise 4.8.0

Current behavior

Any request for Users::SessionsController#create with User A token and User B params will login with User A data. e.g.: https://github.com/espoo-dev/espoo-dev/pull/542/files

Expected behavior

Any request for Users::SessionsController#create with User A token and User B params should login with User B params.