Token-based Rack session middleware.