Essentially, the answer from @chipjuggler here is correct, not sure why it is not working anymore. When the page refreshes you need to log back in. You cannot keep logged in between page refreshes.
I answered a similar question here which relies more on the accounts package so you do not need to manage the _storedLoginToken yourself. And it works today. I am using it in 1.4.2.6.