Add custom session controller for API-based login/logout
Remove bevor_save filter that creates the token. It is now created on login/logout.
Use custom session routes for API instead of devise routes (as the controller doesn't inherit from Devise)
Add API logout spec.
Add documentation for API login/logout.