Added hashed session token to User controller, worked on lease functions.