Added explicit `serialize()` / `unserialize()` for session token storage

Proposed solution for https://github.com/Lusitanian/PHPoAuthLib/issues/124