Simplify and fix session system:
Session tokens are no longer used. Instead the Android application supplies the user's user name and hashed password, to identify the user.
This should fix the current problemt with the Android app not correctly showing friend requests etc.