Remove param token for admins

Author: cs1m0n

plugins/bcc-login/includes/class-bcc-login-visibility.php

@@ -196,6 +196,15 @@ function on_template_redirect() {
 
         // Show everything to editors
         if ( current_user_can( 'edit_posts' ) ) {
+            if ($param_token) {
+                // Clean URL if token is also present
+                if (!defined('DONOTCACHEPAGE')) define('DONOTCACHEPAGE', true);
+                nocache_headers();
+
+                wp_safe_redirect(remove_query_arg($token_name));
+                exit;
+            }
+
             return;
         }