Ensured that signups/signins get fresh token

no-issue

This is to avoid any weirdness around the two requests for signup to a
paid site. First we have the signup request, and then we have the create
subscription request. After the first signup request a "signedin" event
is fired, fetching a token, but one without any plans.

ghost/sdk/theme-dropin/src/index.js

@@ -76,7 +76,8 @@ function setupMembersListeners() {
         members.signin()
             .then(() => {
                 return members.getToken({
-                    audience: tokenAudience
+                    audience: tokenAudience,
+                    fresh: true
                 }).then(function (token) {
                     setCookie(token);
                     return true;