Added sessions for user authentication

Users are issued sessionID upon login and it must be used for all
operations.