'token-salt-debug-ok'

@@ -354,7 +354,6 @@ class AbstractAction extends Controller_Abstract
             $useSession = false;
         }
         //$useSession = false;
-
         if (!$this->_uid) {
             $cookie = $this->getCookie('_UID');
             // 兼容老的
@@ -363,10 +362,9 @@ class AbstractAction extends Controller_Abstract
                 $cookieList[1] = intval(Encryption::decrypt($cookieList[1]));
                 if (isset($cookieList[1]) && $cookieList[1]) {
                     if ($useSession) {
-                        $token = $cookieList[3];
+                        $token = $this->getCookie('_TOKEN');
                         $salt = substr($token, -8);
-
-                        if ($token === Helpers::makeToken($cookieList[1] . $salt)) {
+                        if ($cookieList[3] === Helpers::makeToken($cookieList[1] . $salt)) {
                             $this->_uid = $cookieList[1];
                         }
                     } else {