Introduce identityToken instead of sessionToken.

During identification process we get a few quite useful informations,
for example user id. It is a wasteful to just drop them, especially that
getting them back is not trivial.

sessionToken will be removed in future, together with the old api.