Auth - round 1.
Fix AuthenticatedRoute
Fix redirection in TokenRoute
Save token in session