Finished api layer for sessions
Changed as_json method for User model so I don't have to remember to always exclude the session token and password digest