Including root in json by default
Put pin authorization in sessions
Fixed manage force_token method to return only an error if failing token